Data Protection: Quick Facts

The Data Protection Act 2018 supplements the General Data Protection Regulation (GDPR) which, as an EU Regulation, has full effect in UK law.

GDPR replaces both the EU’s Data Protection Directive (95/46/EC) and the UK’s Data Protection Act 1998 (DPA).

GDPR controls how personal information is used by organisations, businesses or the Government.

The Data Protection Authority (DPA) in the UK is the Information Commissioner’s Office (ICO).

The Regulation sets out the circumstances in which an organisation must designate a Data Protection Officer (DPO). Data Protection Officers